All ransomware groups
the green blood group
2 tracked victims
·first seen 2026-02-04·last activity 2026-02-04Group profile
The Green Blood Group is an emerging ransomware operation first identified in early 2026 whose Go-based Windows payload uses ChaCha8 encryption and aggressively destroys backup and recovery options, targeting organizations in India, Senegal, Egypt, Colombia, and Belgium.
Recent victims
| Date | Website / victim | Sector | Country |
|---|---|---|---|
| 2026-02-04 | E ECOBAT EGYPT | Manufacturing | EG |
| 2026-02-04 | D DAF SENEGAL | Government & Defense | SN |